๐ซ๐ท
Jager
2026-09-06 08:07:21
(1 month ago)
Blocked by CrowdSec on homelab for scenario: crowdsecurity/http-sensitive-files
Brute-Force
Port Scan
Web App Attack
๐ฉ๐ช
FD-IX
2026-09-06 06:56:41
(1 month ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-09-06 01:38:53
(1 month ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.vscode/mcp.json (+1 more) | 2026-09-06 01:38 UTC
show less
Hacking
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-05 02:32:51
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-05 02:29:12
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.64.210.74 (74.210.64.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.210.74 (74.210.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 22:29:07.080643 2026] [security2:error] [pid 15813:tid 15820] [client 34.64.210.74:44646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.rudiseq.com"] [uri "/wordpress/.git/config"] [unique_id "apt-cxv8Pi_bf3qDMBqk-AAAAQU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-05 01:32:39
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.64.210.74 (74.210.64.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.210.74 (74.210.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 21:32:31.741799 2026] [security2:error] [pid 13899:tid 13899] [client 34.64.210.74:49872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xmas.martinka.org"] [uri "/src/.git/config"] [unique_id "aptxL7inFow2kcxaYAVtzwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-09-05 00:40:20
(1 month ago)
108 requests with url.path *.git/*
Brute-Force
Bad Web Bot
๐บ๐ธ
Charlesiv
2026-09-04 22:02:59
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from KR.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Prot ...
show more
Triggered Cloudflare WAF (firewallCustom) from KR.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /site/.git/config
Timestamp: 2026-09-04T20:48:34Z
Ray ID: a35fdb17ff32a7cf
UA: crusader-worker/1.0
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-04 21:59:53
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.64.210.74 (74.210.64.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.210.74 (74.210.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 17:59:49.341473 2026] [security2:error] [pid 10327:tid 10327] [client 34.64.210.74:57908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.churchlets.net"] [uri "/.git/config"] [unique_id "aps_VZ7MSw7f0SazEoqarAAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-04 19:39:30
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.64.210.74 (74.210.64.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.210.74 (74.210.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 15:39:25.094015 2026] [security2:error] [pid 6218:tid 6218] [client 34.64.210.74:60600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "itbcanada.com"] [uri "/src/.git/config"] [unique_id "apsebQCw0QPe7y0PJycmYgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-04 16:01:35
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.64.210.74 (74.210.64.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.210.74 (74.210.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 12:01:29.411389 2026] [security2:error] [pid 12350:tid 12350] [client 34.64.210.74:36684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nasa.phpsciencelabs.com"] [uri "/backend/.git/config"] [unique_id "aprrWUssGXUdXsUv-l3ZowAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-04 12:00:29
(1 month ago)
[ns67.kdns.gr] httpd-config-scan: sites=global; logs=/var/log/httpd/access_log,/var/log/nginx/access ...
show more
[ns67.kdns.gr] httpd-config-scan: sites=global; logs=/var/log/httpd/access_log,/var/log/nginx/access.log; samples=/.git/config | /wordpress/.git/config | /html/.git/config
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-04 11:21:28
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.64.210.74 (74.210.64.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.210.74 (74.210.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:21:23.472288 2026] [security2:error] [pid 7237:tid 7237] [client 34.64.210.74:42708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "istanbulartlist.pist.org.tr"] [uri "/src/.git/config"] [unique_id "apqpsy7sk78XYLOxOxaEdwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ด
jad-abuse
2026-09-04 09:58:31
(1 month ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, scanner_ua. Observed by 1 sensor(s); 12 hits.
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-04 09:30:18
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.64.210.74 (74.210.64.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.210.74 (74.210.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 05:30:12.405636 2026] [security2:error] [pid 23096:tid 23096] [client 34.64.210.74:46048] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wildfarmer.com"] [uri "/public/.git/config"] [unique_id "apqPpBxCWMiOaHPwnPWbHAAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack